Jump to content

ClosePDFSAVER.exe (Trojan.Agent)

Recommended Posts


I believe ClosePDFSAVER.exe is a false positive. I ran it on http://online.us.drweb.com/ and it came up clean.

This is part of ZipFormsOnline used for Real Estate agents to write contracts.




Malwarebytes' Anti-Malware 1.44

Database version: 3558

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

1/14/2010 6:01:19 AM

mbam-log-2010-01-14 (06-01-10).txt

Scan type: Full Scan (C:\|)

Objects scanned: 365505

Time elapsed: 3 hour(s), 15 minute(s), 46 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 3

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\REFN\PDF-X\ClosePDFSAVER.exe (Trojan.Agent) -> No action taken.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Program Files\REFN\PDF-X\ClosePDFSAVER.exe (Trojan.Agent) -> No action taken.

C:\System Volume Information\_restore{16CBA567-31C9-4A5E-90EB-460A7078F05D}\RP21\A0002449.sys (Malware.Trace) -> No action taken.

C:\System Volume Information\_restore{16CBA567-31C9-4A5E-90EB-460A7078F05D}\RP21\A0002614.sys (Malware.Trace) -> No action taken.

Share this post

Link to post
Share on other sites

That's a MALWAREBYTES false positive, not a SUPERAntiSpyware False Positive. You should contact them and they can assist you in fixing the definitions.

Share this post

Link to post
Share on other sites
This topic is now closed to further replies.

  • Create New...